CVE Intelligence

Lobster-world vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Lobster-world products: 1 record(s), with severity, exploitation and fixes.

Lobster Pro 1

Exploited only (KEV) →

CVE-2024-13971 High · 7.5 CWE-611 Apr 30, 2026
Arbitrary File Read and Server Side Request Forgery via XML External Entities in Lobster_pro
Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET requests to arbitrary services.